FedRAMP 20x · CR2026
Every FedRAMP 20x Class C rule and Key Security Indicator, in one workbook.
The FedRAMP 20x Class C Certification Rules Reference collects all 158 applicable rules and 46 Key Security Indicators from the CR2026 Consolidated Rules, reproduced verbatim and filterable, so your team can see exactly what a Class C (Significant) offering has to prove.
158
15
46
CR2026
WHAT IS INSIDE
The whole Class C rule set, structured to work with, not just to read.
The reference organizes the Class A requirements of FedRAMP 20x so a cloud service provider can see what to demonstrate and where each item traces back to.
All 158 rules and 46 KSIs
Every rule that applies to a Class C offering across the 15 CR2026 rulesets, plus all 46 Key Security Indicators mapped to NIST SP 800-53 controls.
Reproduced verbatim
Every source column and value from the FedRAMP Consolidated Rules, unedited. Rule Name, Force, Applies To Classes, Terms, and more, exactly as published.
Filter by force and clasS
Filter to MUST versus SHOULD, or to the 25 rules that are specific to Class C (Significant), so you can see what this level adds over the baseline.
Built-in self-check
Optional Status and Notes columns turn the reference into a working checklist of where your offering already stands against each rule.
From download to a clear starting point
Download the workbook
Get the Excel reference with a cover, a How to Read guide, the full Rules and KSI tabs, and an Index and Sources tab with the canonical CR2026 links.
Filter and self-check
Filter to the rules that matter for your offering, flag the Class C specific ones, and use the Status column to mark what you meet, what is partial, and what is a gap.
Talk to a FedRAMP advisor
Bring your marked-up workbook to a no-cost session with Elevate’s FedRAMP team and get a prioritized view of where the engineering and assurance work should start.
GET THE REFERENCE
Download the FedRAMP 20x Class C rules workbook
One workbook, the complete Class C picture
Enter your work email and the download link is delivered immediately. The workbook is a no-cost working reference from Elevate Consult’s FedRAMP practice.
- All 158 Class C rules across 15 rulesets, verbatim
- 46 Key Security Indicators mapped to NIST SP 800-53
- Class C specific rules flagged and filterable
- Status and Notes columns for a working self-check
- Every node carries its Rule ID or Indicator ID for source confirmation
BUILT BY PRACTITIONERS
Built by a team that runs these audits.
Elevate’s FedRAMP practice is led by Angela Polania, a governance, risk, and compliance leader holding CISA, CISM, and CRISC. The reference is compiled directly from the published FedRAMP Consolidated Rules (CR2026), reproduced verbatim so nothing is paraphrased or interpreted away.
Every rule and indicator keeps its official identifier, which means your team, and Elevate’s, can confirm each line against the current ruleset rather than trusting a summary. When the rules change by version, the identifiers give you a clean way to re-verify.
This is a working reference, not an official FedRAMP submission. It is the starting point for scoping the engineering and assurance work a Class C offering requires.
+18
+500
10%
85%
The Class C rules tell you what to prove. An advisor tells you where to start.
Download the workbook, mark where your offering stands, and bring it to a no-cost session with Elevate’s FedRAMP team for a prioritized view of the assurance and engineering work ahead.
QUESTIONS
Frequently Asked Questions
What is the FedRAMP 20x Class C rules reference?
It is a consolidated workbook from Elevate Consult that reproduces every rule and Key Security Indicator applying to a Class C (Significant) cloud service offering under FedRAMP 20x. It contains all 158 applicable rules across 15 rulesets and 46 Key Security Indicators from the FedRAMP Consolidated Rules (CR2026), reproduced verbatim and filterable, with each node identified by its Rule ID or Indicator ID so the content can be confirmed at the source.
What is FedRAMP 20x Class C (Significant)?
Class C, labeled Significant, is one of the FedRAMP 20x certification classes. This reference covers the full set of rules and Key Security Indicators that apply to a Class C offering under the CR2026 Consolidated Rules, including 25 rules and several indicators that are specific to Class C beyond the shared baseline.
How many rules apply to a FedRAMP 20x Class C offering?
158 rules apply to a Class C offering, organized across 15 rulesets that map to the six-step certification process: Marketplace Listing, FedRAMP Certification, Boundary Rulesets, Assurance Rulesets, Package Rulesets, and Key Security Indicators. The reference also includes 46 Key Security Indicators mapped to NIST SP 800-53 controls.
What is included in the download?
An Excel workbook with a cover, a How to Read guide, a Rules tab reproducing all source columns for the 158 rules, a KSI tab reproducing all source columns for the 46 indicators, and an Index and Sources tab with counts and canonical FedRAMP CR2026 links. Every column is filterable, Class C specific nodes are flagged, and optional Status and Notes columns let a provider self-check where its offering stands.
Is this an official FedRAMP document?
No. It is a working reference compiled from the published FedRAMP Consolidated Rules (CR2026). Official FedRAMP 20x submissions are made through the official machine-readable schemas, not a spreadsheet. The rules are version-sensitive, so values should be confirmed against the current ruleset. It is not legal or compliance advice.
Who produced the reference and how current is it?
It is produced by Elevate Consult’s FedRAMP practice, led by Angela Polania. The content is reproduced verbatim from the FedRAMP Consolidated Rules (CR2026) at the compile date shown on the cover, with each rule and indicator carrying its official identifier so it can be re-verified against the current ruleset.